Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HUy8r024ZN5MXOZQwhgRTcUentU.roa
File: HUy8r024ZN5MXOZQwhgRTcUentU.roa (raw, json)
Hash identifier: VWsyOUzKYtEfptAMTitRJ1ZjlrjQs7eh2Zd4vjOi4xY=
Subject key identifier: 1D:4C:BC:AF:4D:B8:64:DE:4C:5C:E6:50:C2:18:11:4D:C5:1E:9E:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DD70B4467ABF94090E944C650B15B927
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HUy8r024ZN5MXOZQwhgRTcUentU.roa
Signing time: Tue 02 May 2023 17:09:23 +0000
ROA not before: Tue 02 May 2023 17:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:70:b4:46:7a:bf:94:09:0e:94:4c:65:0b:15:b9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 17:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d4cbcaf4db864de4c5ce650c218114dc51e9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:c8:fe:e6:c3:24:ad:d6:74:c6:02:8d:2c:
5b:83:20:da:f7:48:8a:3c:1e:e3:d7:6f:7f:79:d1:
75:56:43:e0:c2:ec:4a:5c:81:24:b6:ae:05:24:21:
46:f7:28:74:0c:fc:63:35:e7:50:b3:bb:c3:61:12:
38:c9:a3:78:6b:a8:fc:ca:2a:4b:6a:99:12:fb:c2:
f5:bc:ee:14:60:1b:5c:71:9f:ba:ea:12:fe:cf:46:
74:6c:28:7e:a1:b2:1b:a8:2f:99:77:64:dc:88:1e:
18:00:6a:6d:aa:c5:e7:32:c0:0c:83:ba:db:c5:83:
48:67:d5:9f:b6:6c:02:2a:92:d5:b9:64:fa:03:79:
d7:a3:e7:e4:8a:59:fc:1f:89:3d:a2:66:01:b8:81:
70:fc:9d:00:cc:74:c5:08:4d:e1:fe:54:61:32:e4:
84:60:8f:e7:76:bb:36:5d:f9:e1:65:65:48:b7:67:
7d:25:f1:7e:49:ab:78:68:f2:f6:73:e0:3e:5a:1f:
98:90:be:a7:c4:cc:74:ab:42:45:34:9b:53:82:4a:
76:83:a1:01:4c:78:83:8c:cc:39:94:54:51:db:4d:
f3:9d:9c:83:d0:58:00:f6:61:8a:6a:f6:46:59:a0:
c8:e2:09:64:95:d0:ab:35:b6:bc:a6:3b:ca:58:ee:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:BC:AF:4D:B8:64:DE:4C:5C:E6:50:C2:18:11:4D:C5:1E:9E:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HUy8r024ZN5MXOZQwhgRTcUentU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:9e:20:77:d2:8d:7a:15:f8:e3:2a:d0:57:64:3a:50:21:45:
af:b6:df:92:04:d2:92:8d:f3:e9:22:b3:7c:c6:ce:c3:bd:a7:
a5:71:6b:f1:7d:b6:4d:0c:df:76:8d:ec:ad:65:45:ed:98:59:
df:b9:e1:87:94:de:ce:72:32:d4:c8:9c:08:92:99:50:29:67:
30:9e:ed:22:0a:de:8b:d3:72:3b:e6:87:fb:6b:75:81:9f:3b:
8d:be:42:c0:ca:18:6e:7e:e8:ee:7a:91:c9:ce:88:65:1c:ef:
56:cd:49:4c:ae:3b:19:d2:90:ff:68:40:18:5e:84:e9:c4:5b:
cc:25:1d:b1:df:8e:0b:cd:c5:f7:7b:2c:4b:62:85:f4:c1:00:
ca:05:97:e1:4d:b8:33:b8:e2:00:23:39:db:f2:60:ff:71:63:
68:43:98:9d:fc:7b:67:3b:bc:7b:c6:40:c6:88:63:c0:19:fb:
b3:61:78:e7:13:bb:cf:05:48:86:cb:e6:3d:30:5a:76:c7:52:
97:54:ec:20:f3:e5:8a:67:cb:6b:6f:6b:d5:4c:5e:9a:f4:28:
a0:66:54:49:4d:c4:3a:f6:c4:b4:7e:a8:b0:a6:7d:1c:f2:22:
1e:a8:50:95:ae:ca:2b:1c:0c:9d:e5:f3:0a:5f:70:f8:87:c5:
6a:54:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:57:58 2025 by rpki-client